UC Berkeley Campus Networks

The following is a list of networks used by the University of California at Berkeley Campus and some offsite locations. This list is for informative purposes and does not attempt to document all networks in use by Cal Berkeley as some are not managed or provided by Berkeley IT Network Services.

This list can be used to restrict access from specific networks, but be aware that network address are unreliable as a method of data protection.

Full List of Campus Networks

This is the list of networks used by Cal Berkeley and managed by the Berkeley IT Network Services group.

In the bSecure firewall service this with the exception of the Berkeley-Visitor guest Wi-Fi network is represented by the Object Group UCB-networks_no_visitor

Network	Use
128.32.0.0/16	UCB Campus and Some Remote Sites
136.152.0.0/16	UCB Campus and Some Remote Sites
169.229.0.0/16	UCB Campus and Some Remote Sites
192.31.95.0/241	UCB at San Diego Super Computer Center
192.31.105.0/241	UCB at San Diego Super Computer Center
192.31.161.0/241	UCB at San Diego Super Computer Center
192.58.221.0/241	UCB at San Diego Super Computer Center
192.101.42.0/241	UCB at San Diego Super Computer Center
192.107.102.0/241	UCB at San Diego Super Computer Center
192.195.74.0/241	UCB at San Diego Super Computer Center
10.0.0.0/82	Non-Internet Routable RFC 1918 Address Space
2607:f140::/322	UCB IPv6 Allocation at Campus, Some Remote Sites, and San Diego Super Computer Center

 

Campus Wireless Networks

In the bSecure firewall service eduroam and Berkeley-IoT are represented by the Object Group UCB-eduroam-berkeley-iot and Berkeley-Visistor is represented by the Object Group UCB-berkeley-visitor.

eduroam and Berkeley-IoT Authenticated Wireless Networks bSecure Firewall Object "UCB-eduroam-berkeley-iot"
Network	Use
10.40.0.0/13	Authenticated Network
136.152.64.0/193	Authenticated Direct Assignment Network3
136.152.214.0/23	Authenticated Internet Access Network (NAT Pool)
2607:f140:400::/48	Authenticated IPv6 Public Network
eduroam Authenticated Wireless Networks for Guests bSecure Firewall Object "UCB-eduroam-berkeley-iot" eduroam guests are individuals who have eduroam credentials from a collaborative institutes. These are users with logins that do not include @berkleey.edu - such as @mit.edu or @ucsd.edu.
Network	Use
10.31.0.0/16	Authenticated Guest Network
136.152.208.0/24	Authenticated Guest Internet Access Network (NAT Pool)
2607:f140:5160::/48	Authenticated Guest IPv6 Public Network
Berkeley-Visitor Open Wireless Network bSecure Firewall Object "UCB-berkeley-visitor"
Network	Use
10.56.0.0/131	Visitor IPv4 Network
136.152.209.0/241	Visitor Internet Access Network (NAT Pool)
2607:f140:6000::/481	Visitor IPv6 Public Networks

 

Campus Remote Access VPN Networks (bSecure Remote Access Services with GlobalProtect)

bSecure Remote Access VPN Client Networks bSecure Firewall Object "UCB-bSecure-Remote-Access"
IPv4 Network	IPv6 Network	Use
10.136.128.0/18	2607:f140:800:3::/64	Split Tunnel Client Networks
136.152.16.0/20	2607:f140:800:1::/64	Full, Library, and Auto Tunnel Networks
136.152.210.0/23	2607:f140:800:2::/64	Restricted Tunnel Networks

 

Notes:
    * Access to library resources is estimated only and provided as a guide
    ¹ This network or address range does not have access to Library resources
    ² Some address ranges within the network do not have access to Library resources
    ³ The direct access network is an opt-in service for Wi-Fi devices to receive IPv4 addresses directly accessible from the Internet